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1998. 
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Publication type 

J Journal Paper. 
Treatment codes 

A Application; P Practical. 
Abstract 

The SET (Secure Electronic Transaction) protocol is announced, which is to allow secure commerce and 
payments over the Internet. It is stated that Mastercard and Visa are to employ this system. Demonstration 
screens for order and payment entry are included and a purchasing sequence with SET is explained in detail. 
Dual signatures are to be employed to achieve data protection. (0 refs). 
Descriptors 

access-control; access-protocols; debit-transactions; EFTS; Internet; MasterCard; purchasing; 
security-of-data; Visa. 
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Publication type 
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Treatment codes 

A Application; P Practical. 
Abstract 

In order to decrease crimes such as money laundering, blackmailing etc. in electronic cash systems, fair 
electronic cash has been a major focus of academic research in electronic commence. When a bank finds some 
dubious cash or owner, the trusted entity or trustee can help him to revoke the anonymity of the cash. In the 
previous protocols, the trustee knows all the information of the cash whether he is trusted or not, that is, he 
can trace the user or cash unconditionally. Furthermore, the dishonest trustee may deceive a user, which 
means that he may withdraw cash while tracing other users. Such cases are unfair to the honest users. A new 
fair electronic cash protocol based on untrustworthy trustees is proposed in this paper. The key idea is that the 
coin structure should include the signatures of both the trustee and the bank so that the trustee shares the 
information of the cash with the bank, while we do not use the secret sharing scheme. In contrast with the 
previous protocols, neither the trustee nor the bank can trace the money without the help of the other entity. In 
this way, the privacy of the user is protected furthest. Also, the trustee is off-line in the protocol, which means 
that he will not be involved in withdrawing the cash. Therefore, the protocol is efficient for implementation. 
(16 refs). 
Descriptors 

electronic-money; message-authentication; protocols. 
Keywords 

fair electronic cash; double signatures; crimes; money laundering; data privacy; blackmailing; electronic 
commence; protocols. 

Classification codes 

C7120 {Financial computing) . 

C6130S (Data security) . 
C5640 (Protocols) . 

Copyright statement 

Copyright 2003, lEE. 



INSPEC - 1969 to date (INZZ) 
COPYRIGHT BY Inst, of Electrical Engineers, Stevenage, UK 



File 8:Ei Compendex ( R) 197 0-2004 /Aug W2 

(c) 2004 Elsevier Eng. Info. Inc. 
File 35 : Dissertation Abs Online 1 8 61-2004 /May 

(c) 2004 ProQuest Inf o&Learning 
File 65: Inside Conferences 1993-2004 /Aug W2 

(c) 2004 BLDSC all rts . reserv. 
File 2:INSPEC 1 969-2004 /Aug W2 

(c) 2004 Institution of Electrical Engineers 
File 94 : JICST-EPlus 1985-2004 /Jul W4 

(c)2004 Japan Science and Tech Corp(JST) 
File 6:NTIS 1 964 -2004 /Aug W3 

(c) 2004 NTIS, Intl Cpyrght All Rights Res 
File 144: Pascal 1973-2004 /Aug W2 

(c) 2004 INIST/CNRS 
File 434 :SciSearch(R) Cited Ref Sci 197 4-198 9/Dec 

(c) 1998 Inst for Sci Info 
File 34 :SciSearch(R) Cited Ref Sci 1990-2004 /Aug W2 

(c) 2004 Inst for Sci Info 
File 99:Wilson Appl . Sci & Tech Abs 1 983-2004 /Jul 

(c) 2004 The HW Wilson Co. 
File 266:FEDRIP 2004/Jun 

Comp & dist by NTIS, Intl Copyright All Rights Res 
File 95 : TEME-Technology & Management 198 9-2004 /Jun Wl 

(c) 2004 FIZ TECHNIK 
File 62:SPIN(R) 1975-2004 /Jun W3 

(c) 2004 American Institute of Physics 
File 239:Mathsci 194 0-2004 /Oct 

(c) 2004 American Mathematical Society 

Set Items Description 

51 16812 (ELECTRONIC? OR DIGITAL?) (2N) (SIGNATURE? ? OR SIGN? ? OR S 

IGNED OR SIGNING) OR DSA 

52 352 (WITHOUT OR NO OR "NOT" OR T) (5W)HASH??? OR HASHLESS OR UN- 

HASHED 

53 4513 SIGN???(5W) (TWICE OR (TWO OR 2ND OR SECOND OR ANOTHER OR E 

XTRA OR ADDITIONAL) (IW)TIME? ? OR MORE ( ) (THEN OR THAN) OR AGA- 
IN OR ONCE 0 MORE) 

54 3502 (MULTIPLE OR MULTIPLICITY OR SEVERAL OR MORE ( ) (THEN OR THA- 

N) ()ONE OR MANY OR PLURAL? OR DUAL? OR ANOTHER OR EXTRA OR AD 
DITIONAL OR REDUNDANT OR SECOND? OR 2ND OR TWO) ( 3W) SIGNATURE? 



S5 


33 


SI AND S2 






S6 


19 


RD (unique items) - 






S7 


11 


SI AND S3 






S8 


7 


RD (unique items) 






S9 


330 


SI AND S4 






SIO 


24 


S9 AND HASH??? 






Sll 


17 


RD (unique items) 






S12 


16 


Sll NOT (S6 OR S8) 






S13 


403 


MULTISIGNATURE? ? OR MULTI () SIGNATURE? ? 






S14 


151 


SI AND S13 






S15 


28 


S14 AND HASH??? 






S16 


21 


RD (unique items) 






S17 


19 


S16 NOT (S6 OR S8 OR S12) 






S18 


264 


("R2" OR R(1W) (SUP OR SUPP) (IW) (2 OR TWO)) (IW) ("S2" 


OR 


S(l 




W) (SUP OR SUPP) (IW) (2 OR TWO) ) 






S19 


0 


SI AND S18 






S20 


0 


S13 AND S18 






S21 


1 


HASH??? AND S18 






S22 


33 


("Rl" OR R(1W) (SUP OR SUPP) (IW) (1 OR ONE) ) (IW) ("S2" 


OR 


S(l 




W) (SUP OR SUPP) (IW) (2 OR TWO) ) 






S23 


0 


(SI OR HASH???) AND S22 







11/5/2 (Item 2 from file: 8) 

DIALOG (R) File 8 : Ei Compendex (R) 

(c) 2004 Elsevier Eng. Info. Inc. All rts. reserv. 

06395053 E.I. No: EIP032274 84819 
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Corporate Source: Dept. of Comp. Sci. and Info. Eng. Tamkang University, 
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Publication Year: 2003 

CODEN: ICLEF6 ISSN: 1089-7798 

Language: English 

Document Type: JA; (Journal Article) Treatment: A; (Applications); T; 
(Theoretical) 

Journal Announcement: 030 6W1 

Abstract: Due to the special requirements of the mobile code system, in 
2000, Shieh et al . proposed some multisignature schemes based on a new 
digital signature scheme with message recovery. One major 

characteristic of these schemes is to avoid using one-way hash functions 
and message redundancy schemes. However, this causes some security flaw. 
An attack is proposed to show that the underlying signature scheme is not 
secure. To overcome the attack, the message redundancy schemes may be 
still used. 13 Refs. 
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Abstract (Basic): WO 9737461 A 

The inventive method signs a message (coin) into a digital 
signature of the sender, the signature being generated using public 
and sender secret generators, a sender private key, and other publicly 
known values. The message is then transmitted over e.g. in Internet, to 
the receiver. 

The message to be signed incorporates a first predetermined 
function [f(x)] of the sender's public signature generator (48). Thus a 
receiver may verify the incorporation of such a proper first value. If 
the same message is signed /transmitted more than once, the 
sender's private key may be derived, from the plural signed messages 
using a relationship between the public/private signature generators. 

USE/ADVANTAGE - Affordable, low-cost, off-line, micro-cash 
transmission system for purchasing information over Internet, with 
purchaser anonymity, not involving on-line Bank for payment, without 
using tamper-resistant devices, or purchaser /merchant interactive 
communication, and preferable to sending personal credit-card number 
(even encrypted) over network. 

Dwg .4/6 

Title Terms: MESSAGE; TRANSMISSION; NETWORK; CASH; PURCHASE; TRANSMIT; 

MESSAGE; BEARING; SEND; DIGITAL; SIGNATURE; FUNCTION; MESSAGE; PUBLIC; 

SEND; SECRET; GENERATOR; SEND; PRIVATE; KEY 
Derwent Class: TOl; T05; WOl 

International Patent Class (Main) ; H04L-009/00; H04L-009/32 
International Patent Class (Additional) : H04L-009/30 
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XRPX Acc No: N96-428080 

Zero-knowledge pioblic key digital signature generation method - 
developing first and second signature hash code parameters 
reversibly transformed by third hash code parameter and dependent on 
message sent by signatory 

Patent Assignee: FRANCE TELECOM (ETFR ); LA POSTE (ETFR ) 

Inventor: GIRAULT M 

Number of Countries: 003 Number of Patents: 004 
Patent Family: 
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Priority Applications (No Type Date) : FR 956259 A 19950517 
Cited Patents: 2.Jnl.Ref 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 743775 Al F 18 H04L-009/32 

Designated States (Regional) : DE GB 
EP 743775 Bl F 20 H04L-009/32 

Designated States (Regional) : DE GB 
DE 69600143 E H04L-009/32 Based on patent EP 743775 

FR 2734435 Al H04L-009/30 

Abstract (Basic) : EP 743775 A 

The method involves generating a first parameter (e) which is a 
hash code, f(c,M), and is produced by a one-way hash function, 
receiving an initial value (c) of a random value (r) and a signed 
message (M) . A second parameter (y) is determined from the first 



parameter (e), a secret key (s) and the random value. The third 
parameter is a hash code, g(M), produced by a second one-way hash 
code receiving as input the signed message. 

A reversible transformation stage (35) combines the first and 
second signature parameters with first (gl) and second (g2) 
fractxons of the third parameter or with the entire third parameter 
The hash functions (f,g) of the first and second parameters may be 
identical. ^ 

USE/ADVANTAGE - E.g. computers, facsimile transmission, telephones, 
banking, smart cards. Collision resistant hash function and increased 
signature length not required. Simple without reducing data security 
Dwg.3/4 ^* 
Title Terms: ZERO; PUBLIC; KEY; DIGITAL; SIGNATURE; GENERATE; METHOD* 
DEVELOP; FIRST; SECOND; SIGNATURE; HASH ; CODE; PARAMETER; REVERSE- 
TRANSFORM; THIRD; HASH ; CODE; PARAMETER; DEPEND; MESSAGE; SEND 
Derwent Class: TOl; T04; T05; WOl; W02 

International Patent Class (Main): H04L-009/30; H04L-009/32 
File Segment: EPI 
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(c) 2004 Thomson Derwent. All rts. reserv. 
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